Vulnerabilities > CVE-2006-4306 - Unspecified vulnerability in SUN Solaris and Sunos

047910
CVSS 7.2 - HIGH
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
local
low complexity
sun
NVD
Published: 2006-08-23
Updated: 2018-10-30

Summary

Unspecified vulnerability in Sun Solaris 8 and 9 before 20060821 allows local users to execute arbitrary commands via unspecified vectors, involving the default Role-Based Access Control (RBAC) settings in the "File System Management" profile.

Vulnerable Configurations

Part Description Count
OS
Sun
4

Oval

accepted2007-09-27T08:57:40.395-04:00
classvulnerability
contributors
namePai Peng
organizationOpsware, Inc.
definition_extensions
  • commentSolaris 8 (SPARC) is installed
    ovaloval:org.mitre.oval:def:1539
  • commentSolaris 9 (SPARC) is installed
    ovaloval:org.mitre.oval:def:1457
  • commentSolaris 8 (x86) is installed
    ovaloval:org.mitre.oval:def:2059
  • commentSolaris 9 (x86) is installed
    ovaloval:org.mitre.oval:def:1683
descriptionUnspecified vulnerability in Sun Solaris 8 and 9 before 20060821 allows local users to execute arbitrary commands via unspecified vectors, involving the default Role-Based Access Control (RBAC) settings in the "File System Management" profile.
familyunix
idoval:org.mitre.oval:def:1527
statusaccepted
submitted2007-08-10T12:25:26.000-04:00
titleSecurity Vulnerability May Allow Users With the "File System Management" RBAC Profile to Gain Elevated Privileges
version35

References